Privacy Policy

Effective June 26, 2026 · Version 1.0

This policy explains how Retriever Works Inc. ("Retriever," "we," "us") handles your information when you use Retriever (our website and software application, the "Service"). Retriever helps you model financial and tax decisions and is currently in beta, so we may handle sensitive financial information you choose to enter. By signing up for and using Retriever, you accept this policy along with our Terms of Service.

In this policy, "Personal Information" means information that identifies you or can reasonably be linked to you, such as your name, email address, and the financial details you enter. "Non-Personal Information" means information that cannot reasonably be used to identify you, such as aggregated or de-identified usage data. "You" refers to you, as a user of the Service.

1. What we collect

Information you give us:

• Account details: your name and email address
• Financial information you enter to model tax scenarios, such as income, account information, and other details relevant to your tax situation
• Filing status, state, and other details needed to model your situation
• Messages and feedback you send us

Information collected automatically:

• Usage data
• Device and connection data
• Product analytics, which track how the Service is used through a pseudonymous identifier (a randomly assigned ID, not your name or email) that persists across visits so we can recognize a returning user over time. When you are logged in, this identifier is linked to your account; when you are not logged in, it is not linked to any account and we cannot tie it back to you. We also use site analytics that respect your privacy and do not rely on cookies set by other companies or track you across other sites.

What we ask you NOT to enter: Social Security numbers, bank or brokerage account numbers, card numbers, or login credentials for financial institutions. The Service does not need this information, and you should not enter it.

2. How we use it

We use your information to:

• Run the Service: model scenarios, save your work, and authenticate your account
• Improve and develop the Service and our tax models
• Communicate with you
• Meet legal obligations and prevent fraud

We do not:

• Use your data to make credit, insurance, or employment decisions

3. Who we share it with

We share information only with:

• Service providers that help us run the Service, under data-protection obligations. These include providers for hosting, analytics, form and email delivery, and similar infrastructure. They use your information only at our direction and in accordance with this policy.
• Legal requests, when we have a good-faith belief that disclosure is reasonably necessary to comply with law, a subpoena, or a court order; to enforce our Terms; to address fraud, security, or technical concerns; or to protect the rights, property, or safety of our users or the public. Where permitted, we'll notify you first.
• A business transfer, if Retriever is acquired or merges. Your information may transfer, and we'll notify you before it becomes subject to a different policy.

4. Security and breaches

We take reasonable measures to protect your information, including encryption of your information in transit and at rest, access controls that limit who can see it, and security protections provided by our infrastructure providers. No system is perfectly secure, and this is beta software, so we can't guarantee absolute security.

If a breach affects your personal information, we'll notify you without undue delay, consistent with the New York SHIELD Act and other applicable laws.

5. How long we keep it

We keep your information while your account is active and for a reasonable period afterward for support, fraud prevention, and legal reasons. Truly aggregated data (combined across users, not tied to any individual), and pseudonymous analytics collected before you log in that we cannot link to your account, may be kept indefinitely as de-identified data. You can request deletion at any time by emailing hello@retriever.tax, and we'll delete the information linked to your account within a reasonable time, except where we're legally required to retain something.

If we discontinue the Service, we'll make a reasonable effort to notify you in advance.

6. Your choices and rights

Depending on where you live, you have some or all of the following rights over your personal information:

• Access: ask what personal information we hold about you and get a copy
• Correct: ask us to fix inaccurate personal information
• Delete: ask us to delete your personal information
• Portability: get a copy of your information in a portable format
• Opt out of sale or sharing: to the extent we sell or share personal information as those terms are defined under applicable law, you have the right to opt out
• Limit use of sensitive information: ask us to limit the use of sensitive personal information to what is necessary to provide the Service
• Object: object to or restrict certain uses of your information

To exercise any of these rights, email hello@retriever.tax with the subject line "Privacy Request." We'll respond within 45 days and may verify your identity first; if we need more time, we may extend this period as permitted by law and will let you know.

You may use an authorized agent to submit a request on your behalf. We may ask the agent for proof that you gave them permission, and we may still ask you to verify your own identity directly.

We will not discriminate against you for exercising any of these rights. We will not deny you the Service, charge you a different price, or give you a different level of quality because you exercised a privacy right.

If we deny your request, you may appeal by replying to our decision or emailing hello@retriever.tax with the subject line "Privacy Appeal." We will respond to your appeal within the time your state's law allows. If you are in Colorado, Connecticut, or Virginia and we deny your appeal, you may complain to your state Attorney General. California, Colorado, Virginia, Connecticut, and Utah residents, among others, have these rights under their state laws.

You can unsubscribe from marketing emails anytime via the link in those emails. You'll still get essential account and security messages, including periodic updates to this policy, while your account is active. If you give us your phone number and opt in to text messages, you can stop them anytime by replying STOP; message and data rates may apply. You can manage cookies in your browser settings.

7. Other

The Service is for users 18 and older; we don't knowingly collect information from children under 18. The Service is operated from and intended for the United States; if you use it from elsewhere, your information is processed in the U.S.

We may update this policy at any time. The current version will always be posted here. If we make material changes, we will notify you by email or through the Service before they take effect.

Questions or privacy requests? hello@retriever.tax (subject line: "Privacy Request") · Retriever Works Inc.

Effective June 26, 2026 · Version 1.0